CVE-2026-89275

Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.

• CWE-94

• https://helpx.adobe.com/security/products/campaign/apsb26-142.htmlVendor Advisory

Published

Sep 22, 2026

Last Modified

Sep 23, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-89265MoguBlog through 6.2 contains an authorization bypass vulner…4.3
• CVE-2026-89266stb_vorbis through 1.22 contains a heap buffer overflow in s…8.2
• CVE-2026-89267starlette-admin versions 0.16.1 through 0.17.1 fail to enfor…4.3
• CVE-2026-89268QloApps through 1.7.0 renders back-office list filter POST p…5.4
• CVE-2026-8927When reusing a libcurl handle for sequential transfers drive…9.1
• CVE-2026-89274The WP Recipe Maker plugin for WordPress is vulnerable to Ar…9.1
• CVE-2026-89276Adobe Campaign Classic (ACC) is affected by an Improper Cont…9.9
• CVE-2026-89277CAI Content Credentials is affected by an Integer Overflow o…5.5
• CVE-2026-89278The GPTranslate – Multilingual AI Translation Agent for Word…5.3
• CVE-2026-89281The Apache Lounge Windows distribution of Apache HTTP Server…8.4
• CVE-2026-89282The Apache Lounge Windows distribution of Apache HTTP Server…9.1
• CVE-2026-89298A flaw was found in the Dynamic Client Registration service …4.9